Comment Re:Public key is to complicated for a simple one-s (Score 1) 542
But you wouldn't have to distribute your private key. As long as you explain to the consultant that private keys are meant to be private, and you distribute the public key to the public, you should be pretty safe. The headache of public key encryption in this case is that it might take the consultant a bit of time to understand that before you can send the encrypted data to the target, he must obtain the target's public key. The target should be safe with public key... if someone sends them data signed with the wrong/malicious key, the target's private key simply won't decrypt it. So the source needs to be sure that they obtained the target's public key securely--either by having it signed by a trusted authority or distributed in a trusted way (physical delivery usually).